Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-85192

Conditional Content Pro extension for Joomla · remote code execution

CVSS 4.0 9.4 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-85192

Published

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checking who authored the article. Joomla's normal Author text filter preserves the syntax, so publishing the article causes the code to run as the web-server process.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-85192

Published

plg_system_conditionalcontent

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "packageName": "plg_system_conditionalcontent",
                    "product": "Conditional Content Pro extension for Joomla",
                    "vendor": "regularlabs.com",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "1.0.0-7.1.0"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON